Write integration test confirming all AeonShield.cc endpoints return BLOCKED. Verify Finch cannot re-enable stripped features.